Secure supply chain and provisioning of devices and methods

Abstract

Disclosed are adaptable, auditable, and seamless provisioning systems, methods and processes that allow easy deployment and provisioning of devices and device components through a device manufacturing process and end user deployment. The systems and methods create a cryptographic proof that devices and associated components are authentic, securely set-up, and operated throughout the lifetime of the device. Methods and systems are provided to securely provision devices and components throughout a supply chain and deploy into an environment.

What is claimed: 
     
         1 . A method comprising:
 receiving subcomponent data associated with a subcomponent;   receiving the subcomponent;   incorporating the subcomponent in a device;   receiving device data associated the device;   appending the subcomponent data to the device data;   validating at least one of the subcomponent and the device based on one or more of the received subcomponent data and the received device data;   creating an activity record of at least one of the validated subcomponent and validated device;   appending the validated activity to a device record; and   providing the device record.   
     
     
         2 . The method of  claim 1  further comprising digitally signing one or more validation certificates for one or more of the device and the subcomponent. 
     
     
         3 . The method of  claim 2  further comprising digitally delivering one or more validation certificates for one or more of the device and the subcomponent. 
     
     
         4 . The method of  claim 1  further comprising storing the device record. 
     
     
         5 . The method of  claim 4  further comprising storing the device record a removable media. 
     
     
         6 . The method of  claim 1  further comprising pushing a root public key into a blockchain. 
     
     
         7 . The method of  claim 6  further comprising fetching a root key from the blockchain. 
     
     
         8 . The method of  claim 1  further comprising powering one or more devices in proximity and providing provisioning information. 
     
     
         9 . The method of  claim 1  further comprising associating a readable locator with the device. 
     
     
         10 . A non-transitory machine-readable medium comprising a plurality of machine-readable instructions, the machine-readable instructions executable to perform operations comprising:
 receive subcomponent data associated with a subcomponent incorporated into a device;   receive device data associated the device;   append the subcomponent data to the device data;   validate at least one of the subcomponent and the device based on one or more of the received subcomponent data and device data;   create and store a record of at least one of the validated subcomponent and validated device;   append a validated activity record to a device record; and   provide the device record.   
     
     
         11 . The non-transitory machine-readable medium of  claim 10  further comprising digitally sign one or more validation certificates for one or more of the device and the subcomponent. 
     
     
         12 . The non-transitory machine-readable medium of  claim 11  further comprising digitally deliver one or more validation certificates for one or more of the device and the subcomponent. 
     
     
         13 . The non-transitory machine-readable medium of  claim 10  further comprising store the device record. 
     
     
         14 . The non-transitory machine-readable medium of  claim 10  further comprising push a root public key into a blockchain. 
     
     
         15 . The non-transitory machine-readable medium of  claim 14  further comprising fetch a root key from the blockchain. 
     
     
         16 . The non-transitory machine-readable medium of  claim 10  further comprising provide provisioning information. 
     
     
         17 . The non-transitory machine-readable medium of  claim 10  further comprising read a readable locator associated with the device. 
     
     
         18 . A system, comprising:
 a memory;   and one or more processors operatively coupled to the memory, the one or more processors being configured to execute operations to cause the system to perform operations comprising:   receive subcomponent data associated with a subcomponent incorporated into a device;   receive device data associated the device;   append the subcomponent data to the device data;   validate at least one of the subcomponent and the device based on one or more of the received subcomponent data and device data;   create and store a record of at least one of the validated subcomponent and validated device;   append a validated activity record to a device record; and   provide the device record.   
     
     
         19 . The system of  claim 18  further comprising digitally sign one or more validation certificates for one or more of the device and the subcomponent. 
     
     
         20 . The system of  claim 19  further comprising digitally deliver one or more validation certificates for one or more of the device and the subcomponent. 
     
     
         21 . The system of  claim 18  further comprising store the device record. 
     
     
         22 . The system of  claim 18  further comprising push a root public key into a blockchain. 
     
     
         23 . The system of  claim 22  further comprising fetch a root key from the blockchain. 
     
     
         24 . The system of  claim 18  further comprising provide provisioning information. 
     
     
         25 . The system of  claim 18  further comprising read a readable locator associated with the device.